You mix up the usernames here. The username that you used to log into the website "client1user" is just a alias for the user "web*". See /etc/passwd and compare the user ID's. You user can change everything inside the web directory.